Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: CSASkMGgDGgdMFuLehyZsSRiQZR8HdEJGCTa0ZP8dNM=
Subject key identifier: B3:52:79:D7:A0:C9:C8:C4:7F:10:81:87:8E:16:D7:0D:0E:A3:7D:8F
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019F19439AD5825E3410DEE127FB0B990505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0E17
Signing time: Tue 30 Jun 2026 16:01:28 +0000
Manifest this update: Tue 30 Jun 2026 16:01:28 +0000
Manifest next update: Wed 01 Jul 2026 16:01:28 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: YH7VI+zGH91u2l4feA1cGZ0MX9Z0l1m8X95Mg9ppATc=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:9a:d5:82:5e:34:10:de:e1:27:fb:0b:99:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Jun 30 16:01:28 2026 GMT
Not After : Jul 1 16:01:28 2026 GMT
Subject: CN=b35279d7a0c9c8c47f1081878e16d70d0ea37d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:6b:96:b1:08:8d:c3:f3:98:b7:fa:34:0e:
72:78:f3:1b:f6:b0:64:f7:e8:cc:bf:a8:1c:2c:7c:
25:78:f3:40:b6:e4:4a:7c:1f:b1:4a:07:14:06:59:
f2:39:87:29:01:a7:13:9d:43:8b:f7:0d:6e:5d:a7:
8d:8a:19:35:60:92:f3:be:5d:3a:6b:24:2d:53:80:
dd:16:c6:71:03:06:89:40:78:20:eb:f7:77:07:3f:
11:4e:83:b7:20:8b:bb:c0:bc:7a:cd:9f:33:2c:fc:
df:80:95:a7:58:6a:75:9f:cc:16:01:6f:79:ea:b3:
af:eb:b2:45:0f:17:f0:1c:59:25:c7:4a:ab:90:fb:
0d:60:73:da:d3:e9:69:ab:bf:aa:55:55:11:1d:08:
ff:03:ad:e4:4b:c3:78:63:c6:e9:fc:77:98:6a:96:
2d:5a:27:2d:d8:c6:f5:53:1c:2b:b0:7f:96:74:0a:
c1:b6:a7:33:72:bb:d7:43:8d:92:13:23:2b:3c:3c:
f5:c5:6e:a9:97:7c:14:62:28:85:d0:3d:5b:66:d7:
68:f4:88:2d:8f:38:4e:df:d7:25:e1:bf:40:20:76:
5a:fa:da:0f:a2:f4:48:e8:34:48:18:de:40:8f:a0:
93:06:e3:99:67:3f:29:33:e7:f7:4b:ba:14:c8:ca:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:79:D7:A0:C9:C8:C4:7F:10:81:87:8E:16:D7:0D:0E:A3:7D:8F
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:8b:42:bf:d3:93:6b:0c:37:b9:97:26:57:7e:58:a7:a5:
14:61:ef:69:1e:ea:ad:64:8a:ef:c1:1e:84:8c:cc:e4:e5:41:
4c:49:7d:50:7c:1a:71:1c:b6:9e:95:bc:be:ed:f7:e0:fb:49:
05:b5:c1:82:6f:45:fc:d2:0c:82:3f:b7:88:d1:b3:86:74:10:
f5:bd:63:55:a1:f4:b2:b1:9b:46:43:19:b7:3c:6b:89:4c:de:
3a:f9:f4:66:ea:31:b3:58:af:f9:53:1d:c8:b0:ef:20:67:90:
82:33:d6:8f:2c:d2:dc:58:19:cd:bd:8e:b1:cf:7b:1a:6a:1d:
c0:b8:1d:d8:30:8e:44:4f:eb:4a:5b:72:02:ce:d3:36:ca:f0:
1d:6e:22:f2:1d:71:17:cd:06:c7:ea:9b:22:ac:40:45:8d:80:
3b:ea:07:ca:4d:39:37:2b:ae:05:44:65:c5:2e:78:60:7e:1c:
c4:a6:01:40:93:29:00:24:09:c8:75:94:be:85:26:9a:07:b3:
de:2c:fb:6f:89:9e:03:0c:ee:8d:b3:0a:a4:c6:a9:f9:c7:8e:
d2:52:0a:c3:4c:e7:87:93:8b:fb:d3:2d:f3:83:e8:23:1a:10:
7a:df:d7:ab:98:63:7c:bb:ed:56:b6:43:6e:13:ee:03:66:2a:
b5:cc:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:47 2026 by rpki-client